add the hifi root CA trusted cert to source